Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 01:34

A hypothetical situation:
I' am using random urls that I picked up from somewhere. I' am just looking for something useful and pretty much just picking around to see what I can find. Basically my goal is find something of interest. When I go to this url it says the following: DIRECTORY LISTING DENIED
This Virtual Directory does not allow contents to be listed.

How do I view the directory?

Edited by on 05-06-08 23:23

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 01:45

...

If directory listing is turned off in apache, there is no way you can view the contents of the virtual directory. However, this is very useful because it tells you that a directory exists. From there, you can do your homework to figure what would most likely be in there and get valuable information.

RE: Directory Listing Denied, need some help here.

Posts: 586Location: He is back and he's bad!Joined: 25.11.07 Rank: Mad User

Posted on 13-05-08 01:51

or get access to the server and you will get the content :ninja:

[img][/img]

spyware - "They see me trollin'..."<yaragn> ever seen that movie? The Matrix?
<yaragn> with those green lines of flying text?
<yaragn> *THAT'S* Perl

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 01:52

Nubish question...totally not worth looking at.

Edited by on 05-06-08 23:25

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 01:53

clone4 wrote:
or get access to the server and you will get the content :ninja:

Will do. Access to the server...haha, I know what that means somewhere in my mind. Better do some more homework.

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:20

This isnt very easy to get through. I should have guessed considering it is a very famous site. Well I' am still trying, have the i.p. address and some other info that looks useless but maybe I can use it. Any other suggestions?

Edited by on 05-06-08 23:27

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:24

Intellitamper will usually find the files by brute force and dictioanry scan.

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:30

Coolyz, looked it up and it sounds just like what I need. Thanks for the help guys, any other ideas on what I can do? Just exploring every possibility should I come across something like this again.

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:41

K_I_N_G wrote:I should have guessed considering it is a very famous site.

Or how about you just stop now because you don't know what you are doing...

If you want to learn, great. Stick around here and learn a bit about internet security, it can be your launching point. But having the mindset that you are some l33t h4x0r that is going to go pwn the gibsons, when in fact you don't even know what directory traversal is and think that having a websites ip address means something, makes you look dumb.

Take a step back. Read a little bit. And drop the l33t h4x0r attitude.

Edited by on 13-05-08 02:42

Author

RE: Directory Listing Denied, need some help here.

Posts: 586Location: He is back and he's bad!Joined: 25.11.07 Rank: Mad User

Posted on 13-05-08 02:42

you can scan ports, try if ftp has anonymous login, you can try BTforce it also it might be running CMS, or some vulnerable modules, getting it on 0day, but if it's some big site, I doubt that you will actually get some sensible results, but don't want to discourage, keep on working

[img][/img]

spyware - "They see me trollin'..."<yaragn> ever seen that movie? The Matrix?
<yaragn> with those green lines of flying text?
<yaragn> *THAT'S* Perl

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:45

This was a nub thing so I had to edit it haha.

Edited by on 22-05-08 02:16

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:48

zeus_the_moose wrote:

K_I_N_G wrote:I should have guessed considering it is a very famous site.

Or how about you just stop now because you don't know what you are doing...

If you want to learn, great. Stick around here and learn a bit about internet security, it can be your launching point. But having the mindset that you are some l33t h4x0r that is going to go pwn the gibsons, when in fact you don't even know what directory traversal is and think that having a websites ip address means something, makes you look dumb.

Take a step back. Read a little bit. And drop the l33t h4x0r attitude.

Yeah I feel ya man. Just thinking the best way to do it is throw myself into the shark tank and find a way out. Risk it all and you learn a lot faster. Haha, or maybe I' am just crazy but yeah I'll definitely be working on something else AFTER I finish what I started.

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:51

K_I_N_G wrote:
I used IntelliTamper and not much showed up cept I got the following:
Options/cookies/content: user=mickeymouse
So is this all that page was holding? Seems like it wasnt holding much so is it more probably that there is something else or that this is all that it holds?
(sorry for the nub questions. working on learning by just doing it)

You gotta configure it to do a dictionary/brute force attack. Go to file>options files and folders and make sure perform dictionary scan is on, scan parent folders of startup, and no case distinction. And yes, this will uncover all the files in the directory.

Edited by on 13-05-08 02:52

Author

RE: Directory Listing Denied, need some help here.

Member

Posts:Location:Joined: 01.01.70 Rank: Guest

Posted on 13-05-08 02:57

Thanks a lot man

Hellbound Hackers is the collective work of the staff and the community and is therefore licensed under the CC BY-NC-SA license.